@smileid/usesmileid_vision_document 12.3.1-SNAPSHOT.52 → 12.3.1-SNAPSHOT.64

package/ios/UseSmileIDVisionDocumentModule/UseSmileIDVisionDocumentSessionHolder.swift

@@ -136,11 +136,15 @@ final class UseSmileIDVisionDocumentSessionHolder {
         let nativeOutput = scanResult.output as? UseSmileIDBridge.DocumentDetectorOutput
         let state = scanResult.state
         let events = currentSession.drainCaptureReadyEvents()
-        resultBox.value = [
+        var wire: [String: Any] = [
           "output": nativeOutput?.toWireMap() ?? (["documents": [], "brightness": 0.0] as [String: Any]),
           "state": state.toWireMap(),
           "capturedEvents": events.map { $0.toWireMap() }
         ]
+        if let waived = scanResult.qualityWaived {
+          wire["qualityWaived"] = waived
+        }
+        resultBox.value = wire
         semaphore.signal()
       }
       semaphore.wait()

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@smileid/usesmileid_vision_document",
-  "version": "12.3.1-SNAPSHOT.52",
+  "version": "12.3.1-SNAPSHOT.64",
   "description": "Apple Vision document detection implementation for the UseSmileID React Native (Expo) SDK.",
   "homepage": "https://usesmileid.com",
   "repository": {
@@ -46,8 +46,8 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@smileid/usesmileid_bridge": "12.3.1-SNAPSHOT.52",
-    "@smileid/usesmileid_platform_interface": "12.3.1-SNAPSHOT.52"
+    "@smileid/usesmileid_bridge": "12.3.1-SNAPSHOT.64",
+    "@smileid/usesmileid_platform_interface": "12.3.1-SNAPSHOT.64"
   },
   "peerDependencies": {
     "expo": ">=56.0.0",
@@ -57,10 +57,9 @@
   "devDependencies": {
     "@types/node": "^26.6.4",
     "expo": "~57.0.26",
-    "expo-modules-core": "^57.0.21",
+    "expo-modules-core": "^57.0.23",
     "react-native": "^0.86.3",
-    "typescript": "^6.0.3",
-    "xcode": "^3.0.1"
+    "typescript": "^6.0.3"
   },
   "publishConfig": {
     "access": "public"

package/plugin/build/index.d.ts

@@ -1,12 +1,5 @@
-import { ConfigPlugin } from "expo/config-plugins";
-export interface VisionDocumentOptions {
-    /**
-     * `"disabled"` stops Xcode recording XCFramework signatures in iOS archives
-     * instead of keeping one staged copy per framework — an escape hatch that
-     * drops the records for every framework, Smile ID's and yours alike.
-     */
-    iosSignatureAggregation?: "keep" | "disabled";
-}
+import { type SmileIDSpmOptions } from "@smileid/usesmileid_bridge/plugin";
+export type VisionDocumentOptions = SmileIDSpmOptions;
 export declare const SPM_PRODUCTS: readonly ["UseSmileIDVisionDocument"];
-declare const withVisionDocumentSpm: ConfigPlugin<VisionDocumentOptions | void>;
-export default withVisionDocumentSpm;
+declare const _default: import("@expo/config-plugins").ConfigPlugin<void | SmileIDSpmOptions>;
+export default _default;

package/plugin/build/index.js

@@ -1 +1 @@
-"use strict";var __createBinding=this&&this.__createBinding||(Object.create?(function(i,r,t,e){e===void 0&&(e=t);var o=Object.getOwnPropertyDescriptor(r,t);(!o||("get"in o?!r.__esModule:o.writable||o.configurable))&&(o={enumerable:!0,get:function(){return r[t]}}),Object.defineProperty(i,e,o)}):(function(i,r,t,e){e===void 0&&(e=t),i[e]=r[t]})),__setModuleDefault=this&&this.__setModuleDefault||(Object.create?(function(i,r){Object.defineProperty(i,"default",{enumerable:!0,value:r})}):function(i,r){i.default=r}),__importStar=this&&this.__importStar||(function(){var i=function(r){return i=Object.getOwnPropertyNames||function(t){var e=[];for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[e.length]=o);return e},i(r)};return function(r){if(r&&r.__esModule)return r;var t={};if(r!=null)for(var e=i(r),o=0;o<e.length;o++)e[o]!=="default"&&__createBinding(t,r,e[o]);return __setModuleDefault(t,r),t}})();Object.defineProperty(exports,"__esModule",{value:!0}),exports.SPM_PRODUCTS=void 0;const config_plugins_1=require("expo/config-plugins"),fs=__importStar(require("fs")),path=__importStar(require("path")),deployment_target_1=require("./lib/deployment_target"),podfile_1=require("./lib/podfile"),signature_dedup_1=require("./lib/signature_dedup"),spm_1=require("./lib/spm"),IOS_DEPLOYMENT_TARGET="16.4",SMILE_ID_PACKAGE={url:"https://github.com/smileidentity/ios-spm",requirement:{kind:"exactVersion",version:"12.3.0"}},POD_TARGET="UseSmileIDVisionDocumentExpo";exports.SPM_PRODUCTS=["UseSmileIDVisionDocument"];const PODFILE_MARKER="usesmileid_vision_document",BRIDGE_POD_TARGET="UseSmileIDBridgeExpo",BRIDGE_SPM_PRODUCTS=["UseSmileIDBridge"],BRIDGE_PODFILE_MARKER="usesmileid_bridge",withVisionDocumentSpm=(i,r)=>(i=(0,deployment_target_1.withIosDeploymentTargetFloor)(i,IOS_DEPLOYMENT_TARGET),i=(0,config_plugins_1.withXcodeProject)(i,t=>{const e=t.modRequest.projectName;if(!e)throw new Error("[usesmileid_vision_document] Unable to resolve host app native target name from Expo config.");return(0,spm_1.linkSpmPackage)(t.modResults,SMILE_ID_PACKAGE,{targetName:e,products:[...exports.SPM_PRODUCTS]}),r?.iosSignatureAggregation==="disabled"?(0,signature_dedup_1.disableSignatureAggregation)(t.modResults,e):(0,signature_dedup_1.ensureSignatureDedupPhase)(t.modResults,e),t}),i=(0,config_plugins_1.withDangerousMod)(i,["ios",t=>{const e=path.join(t.modRequest.platformProjectRoot,"Podfile"),o=fs.readFileSync(e,"utf-8");let n=(0,podfile_1.injectPodfileSpmBlock)(o,{marker:PODFILE_MARKER,package:SMILE_ID_PACKAGE,podTarget:POD_TARGET,products:[...exports.SPM_PRODUCTS]});return n=(0,podfile_1.injectPodfileSpmBlock)(n,{marker:BRIDGE_PODFILE_MARKER,package:SMILE_ID_PACKAGE,podTarget:BRIDGE_POD_TARGET,products:[...BRIDGE_SPM_PRODUCTS],required:!0}),n=(0,podfile_1.injectPodfileKameraLinkBlock)(n),n=(0,podfile_1.injectPodfileNjiaLinkBlock)(n),n=(0,podfile_1.injectPodfileSignatureDedupBlock)(n),n!==o&&fs.writeFileSync(e,n),t}]),i);exports.default=withVisionDocumentSpm;
+"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.SPM_PRODUCTS=void 0;const plugin_1=require("@smileid/usesmileid_bridge/plugin");exports.SPM_PRODUCTS=["UseSmileIDVisionDocument"],exports.default=(0,plugin_1.withSmileIDSpm)({packageName:"usesmileid_vision_document",podTarget:"UseSmileIDVisionDocumentExpo",products:exports.SPM_PRODUCTS});

package/plugin/build/lib/deployment_target.d.ts

@@ -1,5 +0,0 @@
-import { type ConfigPlugin } from "expo/config-plugins";
-/** Sets `ios.deploymentTarget` to `minimum` unless the project already asks for a higher one. */
-export declare const withIosDeploymentTargetFloor: ConfigPlugin<string>;
-/** Pure form of the edit the plugin makes to the Podfile properties. */
-export declare function raiseDeploymentTarget(properties: Readonly<Record<string, string>>, minimum: string): Record<string, string>;

package/plugin/build/lib/deployment_target.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.withIosDeploymentTargetFloor=void 0,exports.raiseDeploymentTarget=raiseDeploymentTarget;const config_plugins_1=require("expo/config-plugins"),withIosDeploymentTargetFloor=(e,t)=>(0,config_plugins_1.withPodfileProperties)(e,r=>(r.modResults=raiseDeploymentTarget(r.modResults,t),r));exports.withIosDeploymentTargetFloor=withIosDeploymentTargetFloor;function raiseDeploymentTarget(e,t){const r=e["ios.deploymentTarget"];return r!==void 0&&compareVersions(r,t)>=0?{...e}:{...e,"ios.deploymentTarget":t}}function compareVersions(e,t){const r=e.split("."),n=t.split(".");for(let o=0;o<Math.max(r.length,n.length);o++){const s=toNumber(r[o]??"0")-toNumber(n[o]??"0");if(s!==0)return s}return 0}function toNumber(e){const t=Number.parseInt(e,10);return Number.isNaN(t)?0:t}

package/plugin/build/lib/podfile.d.ts

@@ -1,42 +0,0 @@
-import type { SpmPackage } from "./spm";
-export interface PodfileLinkOptions {
-    /** Marker key — distinct per bridge so each plugin owns its own block. */
-    marker: string;
-    package: SpmPackage;
-    /** Pod target name (e.g. `UseSmileIDVisionFaceExpo`). */
-    podTarget: string;
-    /** SPM library product names to link to the pod target. */
-    products: string[];
-    /** Fail `pod install` when the target is absent — a warning there reads as success. */
-    required?: boolean;
-}
-/**
- * Idempotently injects an SPM-linking Ruby block into the Podfile's
- * top-level `post_install` block. Re-running on an already-injected
- * Podfile rewrites the same marker block in place (so version /
- * product changes flow through cleanly on the next prebuild).
- */
-export declare function injectPodfileSpmBlock(podfile: string, options: PodfileLinkOptions): string;
-/**
- * Links kamera-spm's products into the `kamera-rn` (and `kamera-testing`) pod
- * targets with the helper `@smileid/kamera` ships. The SDK's own binaries link
- * `Kamera.framework` dynamically and ios-spm declares kamera-spm for the app, so
- * the kamera pod must take Kamera from that same package instead of vendoring a
- * second copy; the helper pins kamera-spm at the installed `@smileid/kamera`
- * version, so the pin can never drift from the JS side. Idempotent per marker.
- */
-export declare function injectPodfileKameraLinkBlock(podfile: string): string;
-/**
- * Links njia-spm's `Njia` product into the `njia-rn` pod target with the helper
- * `@smileid/njia` ships. The SDK's flows route through njia's native engine, which that
- * pod hosts. The helper pins njia-spm at the installed package's own version, lists the
- * package on the app's own project, and links Njia into its app targets, so Xcode
- * resolves the package and embeds the dynamic framework. Idempotent per marker.
- */
-export declare function injectPodfileNjiaLinkBlock(podfile: string): string;
-/**
- * Adds the archive signature-dedup phase to the app target of the user's own
- * project — the path for apps whose `ios/` is hand-maintained, where no config
- * plugin runs. Guarded by phase name, so an app on both paths gets one.
- */
-export declare function injectPodfileSignatureDedupBlock(podfile: string): string;

package/plugin/build/lib/podfile.js

@@ -1,260 +0,0 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.injectPodfileSpmBlock=injectPodfileSpmBlock,exports.injectPodfileKameraLinkBlock=injectPodfileKameraLinkBlock,exports.injectPodfileNjiaLinkBlock=injectPodfileNjiaLinkBlock,exports.injectPodfileSignatureDedupBlock=injectPodfileSignatureDedupBlock;const signature_dedup_1=require("./signature_dedup"),BEGIN_PREFIX="# === BEGIN smileid-spm:",END_PREFIX="# === END smileid-spm:",SIGNATURE_DEDUP_MARKER="usesmileid_signature_dedup",KAMERA_LINK_MARKER="kamera_spm",NJIA_LINK_MARKER="njia_spm";function injectPodfileSpmBlock(e,r){return validateRubySafe(r),injectMarkerBlock(e,r.marker,renderBlock(r))}function injectPodfileKameraLinkBlock(e){return injectMarkerBlock(e,KAMERA_LINK_MARKER,renderKameraLinkBlock())}function injectPodfileNjiaLinkBlock(e){return injectMarkerBlock(e,NJIA_LINK_MARKER,renderNjiaLinkBlock())}function injectPodfileSignatureDedupBlock(e){return injectMarkerBlock(e,SIGNATURE_DEDUP_MARKER,renderSignatureDedupBlock())}function injectMarkerBlock(e,r,a){const t=`${BEGIN_PREFIX} ${r} ===`,o=`${END_PREFIX} ${r} ===`,s=new RegExp(`([ \\t]*)${escapeRegExp(t)}[\\s\\S]*?${escapeRegExp(o)}`,"m"),i=e.match(s);if(i)return e.replace(s,()=>indentBlock(a,i[1]??""));const p=/(post_install\s+do\s*\|\s*installer\s*\|)\r?\n/,n=e.match(p);if(!n||n.index===void 0)throw new Error("[smileid-spm] Could not locate `post_install do |installer|` in Podfile. Refusing to append a top-level post_install hook because CocoaPods only honors one \u2014 adding a second would silently override the React Native post-install plumbing. Restore the Expo Podfile template or wire the SPM block in manually.");const d=n.index+n[0].length,c=`${indentBlock(a,"    ")}
-`;return e.slice(0,d)+c+e.slice(d)}function indentBlock(e,r){return e.split(`
-`).map(a=>a.length>0?`${r}${a}`:a).join(`
-`)}function validateRubySafe(e){const r=[["marker",e.marker],["package.url",e.package.url],["podTarget",e.podTarget]];for(const a of e.products)r.push(["products[*]",a]);switch(e.package.requirement.kind){case"upToNextMajorVersion":case"upToNextMinorVersion":r.push(["requirement.minimumVersion",e.package.requirement.minimumVersion]);break;case"exactVersion":r.push(["requirement.version",e.package.requirement.version]);break;case"branch":r.push(["requirement.branch",e.package.requirement.branch]);break}for(const[a,t]of r)if(/['"#\\\n\r\t]/.test(t))throw new Error(`[smileid-spm] Refusing to inject Podfile block: '${a}' contains an unsafe character (got: ${JSON.stringify(t)}).`)}function renderBlock(e){const r=`${BEGIN_PREFIX} ${e.marker} ===`,a=`${END_PREFIX} ${e.marker} ===`,t=renderRequirement(e.package.requirement),o=e.products.map(i=>`'${i}'`).join(", "),s=e.required?`raise "[smileid-spm] Pod target #{target_name} is missing from Pods.xcodeproj, so #{product_names.join(', ')} cannot be linked and the Smile ID bridge will not compile. Check that '@smileid/usesmileid_bridge' is installed and that its npm package ships its 'ios' directory."`:'Pod::UI.warn "[smileid-spm] Pod target #{target_name} not found; skipping SPM link."';return`${r}
-# Wires ${e.package.url} into Pods.xcodeproj and links its
-# products to the '${e.podTarget}' pod target so the Swift
-# bridge code can \`import\` them. Idempotent across pod installs.
-#
-# UUIDs are minted via SecureRandom rather than \`pods_project.new\`
-# because \`prepare_react_native_project!\` sets
-# \`:deterministic_uuids => false\`. With that flag off, CocoaPods
-# skips its predictabilize step and \`stabilize_target_uuids\` resets
-# \`@generated_uuids\` to a tiny leftover pool \u2014 so any post_install
-# call to \`pods_project.new\` restarts the sequential index near 0
-# and re-mints UUIDs already in use. The collision then runs through
-# \`add_referrer\`, which clobbers \`objects_by_uuid[uuid]\` and
-# leaves the rootObject (\`46EB2E00000000\`) unreachable, crashing
-# Xcode 26 with \`XCSwiftPackageProductDependency
-# _setSavedArchiveVersion:\` unrecognized selector. Random 24-char
-# hex IDs can't collide with the 14-char cocoapods scheme.
-begin
-  pods_project = installer.pods_project
-  spm_url = '${e.package.url}'
-  spm_requirement = ${t}
-  product_names = [${o}]
-  target_name = '${e.podTarget}'
-
-  smileid_spm_safe_uuid = lambda do |project|
-    loop do
-      candidate = SecureRandom.hex(12).upcase
-      return candidate unless project.objects_by_uuid.key?(candidate)
-    end
-  end
-
-  pkg = pods_project.root_object.package_references.find do |r|
-    r.respond_to?(:repositoryURL) && r.repositoryURL == spm_url
-  end
-  unless pkg
-    pkg_uuid = smileid_spm_safe_uuid.call(pods_project)
-    pkg = Xcodeproj::Project::Object::XCRemoteSwiftPackageReference.new(pods_project, pkg_uuid)
-    pkg.initialize_defaults
-    pkg.repositoryURL = spm_url
-    pkg.requirement = spm_requirement
-    pods_project.root_object.package_references << pkg
-  end
-
-  target = pods_project.targets.find { |t| t.name == target_name }
-  if target.nil?
-    ${s}
-  else
-    product_names.each do |product_name|
-      already = target.package_product_dependencies.any? do |d|
-        d.package == pkg && d.product_name == product_name
-      end
-      next if already
-
-      dep_uuid = smileid_spm_safe_uuid.call(pods_project)
-      dep = Xcodeproj::Project::Object::XCSwiftPackageProductDependency.new(pods_project, dep_uuid)
-      dep.initialize_defaults
-      dep.package = pkg
-      dep.product_name = product_name
-      target.package_product_dependencies << dep
-
-      bf_uuid = smileid_spm_safe_uuid.call(pods_project)
-      bf = Xcodeproj::Project::Object::PBXBuildFile.new(pods_project, bf_uuid)
-      bf.initialize_defaults
-      bf.product_ref = dep
-      target.frameworks_build_phase.files << bf
-    end
-
-    # Every linking static pod absorbs ios-spm's source-target objects and the
-    # app's -ObjC link then sees duplicates \u2014 the app keeps the single copy.
-    strip_name = '[smileid-spm] Strip absorbed SPM source objects'
-    unless target.shell_script_build_phases.any? { |p| p.name == strip_name }
-      # \`new_shell_script_build_phase\` mints through \`pods_project.new\`, whose
-      # reset index (see above) hands out 46EB2E00000000 \u2014 the rootObject's own
-      # UUID \u2014 and the overwrite makes Xcode reject the project as damaged.
-      phase_uuid = smileid_spm_safe_uuid.call(pods_project)
-      phase = Xcodeproj::Project::Object::PBXShellScriptBuildPhase.new(pods_project, phase_uuid)
-      phase.initialize_defaults
-      phase.name = strip_name
-      target.build_phases << phase
-      phase.shell_script = <<~'STRIPSH'
-        set -u
-        A="\${TARGET_BUILD_DIR}/\${EXECUTABLE_PATH}"
-        [ -f "$A" ] || exit 0
-        strip_obj() {
-          ar -t "$1" 2>/dev/null | grep -q "^$2$" || return 0
-          ar -d "$1" "$2" && ranlib "$1" 2>/dev/null || true
-        }
-        ARCHS_IN=$(lipo -archs "$A" 2>/dev/null || true)
-        for OBJ in UseSmileIDSentrySupport.o UseSmileIDLottieSupport.o UseSmileIDKameraSupport.o; do
-          if [ "$(echo "$ARCHS_IN" | wc -w)" -gt 1 ]; then
-            THIN=""
-            for ARCH in $ARCHS_IN; do
-              lipo -thin "$ARCH" "$A" -output "$A.$ARCH"
-              strip_obj "$A.$ARCH" "$OBJ"
-              THIN="$THIN $A.$ARCH"
-            done
-            lipo -create $THIN -output "$A"
-            rm -f $THIN
-          else
-            strip_obj "$A" "$OBJ"
-          fi
-        done
-      STRIPSH
-    end
-  end
-
-  pods_project.save
-rescue => e
-  Pod::UI.warn "[smileid-spm] Failed to link SPM products for ${e.podTarget}: #{e.message}"
-  raise
-end
-${a}`}function renderKameraLinkBlock(){return`${BEGIN_PREFIX} ${KAMERA_LINK_MARKER} ===
-# Links kamera-spm's Kamera / KameraVision products into the kamera-rn pod target (and
-# KameraTesting into kamera-testing when present) with the helper @smileid/kamera ships,
-# pinned at the installed package's own version. The Smile ID SDK binaries link
-# Kamera.framework dynamically and ios-spm declares kamera-spm for the app, so the pod
-# must take Kamera from that same package rather than vendor a second copy.
-require 'json'
-require 'securerandom'
-begin
-  kamera_package_json = \`node --print "const p=require('path');let d=[process.cwd()];try{d.unshift(p.dirname(require.resolve('@smileid/usesmileid')))}catch(e){}require.resolve('@smileid/kamera/package.json',{paths:d})"\`.strip
-  if kamera_package_json.empty?
-    raise "[smileid-spm] @smileid/kamera is not installed, so its kamera-rn pod cannot be linked to kamera-spm."
-  end
-  kamera_spm_helper = File.join(File.dirname(kamera_package_json), 'ios', 'kamera_spm_link.rb')
-  if File.exist?(kamera_spm_helper)
-    require kamera_spm_helper
-    # The Smile ID provider pods import Kamera themselves. A SwiftPM product linked into the
-    # kamera-rn target does not reach the pods that depend on it the way a vendored framework's
-    # search path did, so those targets take the product directly (absent ones are skipped).
-    kamera_spm_link!(installer, targets: KAMERA_SPM_TARGETS.merge(
-      'UseSmileIDVisionFaceExpo' => %w[Kamera],
-      'UseSmileIDVisionDocumentExpo' => %w[Kamera],
-    ))
-    # Two things only the app's own project can do, exactly as it does for ios-spm:
-    # 1. CocoaPods rewrites the Pods project after post_install and drops the package
-    #    references the helper attaches to it (the product dependencies survive), so Xcode
-    #    resolves kamera-spm only if a project in the workspace still lists it \u2014 otherwise
-    #    the build stops at "Missing package product 'Kamera'".
-    # 2. Kamera and KameraVision are dynamic frameworks. Linked into static pod targets they
-    #    are never embedded, and the app dies in dyld ("Library not loaded:
-    #    @rpath/Kamera.framework/Kamera"). Xcode embeds a binary product only for an app
-    #    target that depends on it, so the app target takes both products directly.
-    kamera_spm_url = 'https://github.com/smileidentity/kamera-spm'
-    kamera_spm_version = JSON.parse(File.read(kamera_package_json))['version'].sub(/-SNAPSHOT$/, '')
-    kamera_spm_app_products = %w[Kamera KameraVision]
-    # A reference an app added by hand may spell the same repository differently (.git suffix,
-    # trailing slash, case); a second reference to one repository fails Xcode's resolution.
-    normalize_url = ->(url) { url.to_s.downcase.chomp('/').sub(/\\.git\\z/, '') }
-    installer.aggregate_targets.group_by(&:user_project).each do |user_project, aggregate_targets|
-      next if user_project.nil? # integrate_targets: false \u2014 nothing to register on
-      # SecureRandom, not user_project.new: React Native's prepare_react_native_project!
-      # leaves Xcodeproj's UUID pool unusable for objects minted in post_install.
-      new_uuid = lambda do
-        loop do
-          candidate = SecureRandom.hex(12).upcase
-          break candidate unless user_project.objects_by_uuid.key?(candidate)
-        end
-      end
-      changed = false
-      ref = user_project.root_object.package_references.find do |r|
-        r.respond_to?(:repositoryURL) && normalize_url.call(r.repositoryURL) == normalize_url.call(kamera_spm_url)
-      end
-      unless ref
-        ref = Xcodeproj::Project::Object::XCRemoteSwiftPackageReference.new(user_project, new_uuid.call)
-        ref.initialize_defaults
-        ref.repositoryURL = kamera_spm_url
-        user_project.root_object.package_references << ref
-        changed = true
-      end
-      requirement = { 'kind' => 'exactVersion', 'version' => kamera_spm_version }
-      if ref.requirement != requirement
-        ref.requirement = requirement
-        changed = true
-      end
-      app_targets = aggregate_targets.flat_map(&:user_targets).uniq.select do |t|
-        t.respond_to?(:product_type) && t.product_type == 'com.apple.product-type.application'
-      end
-      app_targets.each do |app_target|
-        kamera_spm_app_products.each do |product_name|
-          next if app_target.package_product_dependencies.any? { |d| d.package == ref && d.product_name == product_name }
-          dep = Xcodeproj::Project::Object::XCSwiftPackageProductDependency.new(user_project, new_uuid.call)
-          dep.initialize_defaults
-          dep.package = ref
-          dep.product_name = product_name
-          app_target.package_product_dependencies << dep
-          build_file = Xcodeproj::Project::Object::PBXBuildFile.new(user_project, new_uuid.call)
-          build_file.initialize_defaults
-          build_file.product_ref = dep
-          app_target.frameworks_build_phase.files << build_file
-          changed = true
-        end
-      end
-      next unless changed
-      user_project.save
-      Pod::UI.puts "[smileid-spm] #{File.basename(user_project.path)}: #{app_targets.map(&:name).join(', ')} link kamera-spm #{kamera_spm_version} (#{kamera_spm_app_products.join(', ')}) so Xcode resolves and embeds it"
-    end
-  else
-    # Releases before the helper vendor Kamera.xcframework themselves, so the pod still
-    # compiles; but the app then embeds that copy next to the one ios-spm resolves.
-    Pod::UI.warn "[smileid-spm] @smileid/kamera at #{File.dirname(kamera_package_json)} ships no ios/kamera_spm_link.rb " \\
-      "(it still vendors Kamera.xcframework). Upgrade to a release that depends on kamera-spm so the app carries one Kamera.framework."
-  end
-rescue => e
-  Pod::UI.warn "[smileid-spm] Failed to link kamera-spm into the kamera pods: #{e.message}"
-  raise
-end
-${END_PREFIX} ${KAMERA_LINK_MARKER} ===`}function renderNjiaLinkBlock(){return`${BEGIN_PREFIX} ${NJIA_LINK_MARKER} ===
-# The SDK's flows route through njia's native engine. Links njia-spm's Njia product into the
-# njia-rn pod, and into the app so Xcode embeds the framework, with the helper @smileid/njia
-# ships, pinned at the installed package's own version.
-njia_package_json = \`node --print "const p=require('path');let d=[process.cwd()];try{d.unshift(p.dirname(require.resolve('@smileid/usesmileid')))}catch(e){}require.resolve('@smileid/njia/package.json',{paths:d})"\`.strip
-if njia_package_json.empty?
-  raise "[smileid-spm] @smileid/njia is not installed, so the njia-rn pod cannot be linked to njia-spm."
-end
-require File.join(File.dirname(njia_package_json), 'ios', 'njia_spm_link.rb')
-njia_spm_link!(installer)
-${END_PREFIX} ${NJIA_LINK_MARKER} ===`}function renderSignatureDedupBlock(){return`${BEGIN_PREFIX} ${SIGNATURE_DEDUP_MARKER} ===
-# For apps whose \`ios/\` is hand-maintained, so no config plugin ever runs.
-# UUIDs come from SecureRandom for the same reason as above.
-begin
-  dedup_name = '${signature_dedup_1.SIGNATURE_DEDUP_PHASE_NAME}'
-  smileid_dedup_safe_uuid = lambda do |project|
-    loop do
-      candidate = SecureRandom.hex(12).upcase
-      return candidate unless project.objects_by_uuid.key?(candidate)
-    end
-  end
-
-  installer.aggregate_targets.each do |aggregate_target|
-    user_project = aggregate_target.user_project
-    next unless user_project
-
-    added = false
-    aggregate_target.user_targets.each do |user_target|
-      next if user_target.shell_script_build_phases.any? { |p| p.name == dedup_name }
-
-      phase = Xcodeproj::Project::Object::PBXShellScriptBuildPhase.new(
-        user_project, smileid_dedup_safe_uuid.call(user_project)
-      )
-      phase.initialize_defaults
-      phase.name = dedup_name
-      phase.always_out_of_date = '1'
-      phase.shell_script = <<~'SMILEIDDEDUP'
-${indentBlock(signature_dedup_1.SIGNATURE_DEDUP_SCRIPT,"        ")}
-      SMILEIDDEDUP
-      user_target.build_phases << phase
-      added = true
-    end
-
-    user_project.save if added
-  end
-rescue => e
-  Pod::UI.warn "[smileid-spm] Failed to add the XCFramework signature dedup phase: #{e.message}"
-  raise
-end
-${END_PREFIX} ${SIGNATURE_DEDUP_MARKER} ===`}function renderRequirement(e){switch(e.kind){case"upToNextMajorVersion":return`{ kind: 'upToNextMajorVersion', minimumVersion: '${e.minimumVersion}' }`;case"upToNextMinorVersion":return`{ kind: 'upToNextMinorVersion', minimumVersion: '${e.minimumVersion}' }`;case"exactVersion":return`{ kind: 'exactVersion', version: '${e.version}' }`;case"branch":return`{ kind: 'branch', branch: '${e.branch}' }`}}function escapeRegExp(e){return e.replace(/[.*+?^${}()|[\]\\]/g,"\\$&")}

package/plugin/build/lib/signature_dedup.d.ts

@@ -1,14 +0,0 @@
-import { XcodeProject } from "expo/config-plugins";
-export declare const SIGNATURE_DEDUP_PHASE_NAME = "[smileid-spm] Dedupe XCFramework signatures";
-export declare const SIGNATURE_DEDUP_SCRIPT: string;
-/**
- * Appends the dedup phase, idempotently by name so both vision plugins and
- * repeated prebuilds converge on one. It goes last because every pod target
- * must have staged its signatures before it runs.
- */
-export declare function ensureSignatureDedupPhase(project: XcodeProject, targetName: string): void;
-/**
- * Stops Xcode recording XCFramework signatures at all — the escape hatch behind
- * `iosSignatureAggregation: "disabled"`.
- */
-export declare function disableSignatureAggregation(project: XcodeProject, targetName: string): void;

package/plugin/build/lib/signature_dedup.js

@@ -1,2 +0,0 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.SIGNATURE_DEDUP_SCRIPT=exports.SIGNATURE_DEDUP_PHASE_NAME=void 0,exports.ensureSignatureDedupPhase=ensureSignatureDedupPhase,exports.disableSignatureAggregation=disableSignatureAggregation;const spm_1=require("./spm");exports.SIGNATURE_DEDUP_PHASE_NAME="[smileid-spm] Dedupe XCFramework signatures",exports.SIGNATURE_DEDUP_SCRIPT=["# Archive assembly sweeps staged *.signature files into one filename-keyed","# folder and aborts on the first duplicate; keep exactly one per name.","set -u",'case "${BUILT_PRODUCTS_DIR:-}" in',"  */ArchiveIntermediates/*) ;;","  *) exit 0 ;;","esac",'seen=" "','for sig in "${BUILT_PRODUCTS_DIR}"/*/*.xcframework-*.signature; do','  [ -e "$sig" ] || continue','  name=$(basename "$sig")','  if [ -e "${BUILT_PRODUCTS_DIR}/${name}" ]; then','    rm -rf "$sig"',"  else",'    case "$seen" in','      *" ${name} "*) rm -rf "$sig" ;;','      *) seen="${seen}${name} " ;;',"    esac","  fi","done","exit 0"].join(`
-`);function ensureSignatureDedupPhase(e,i){const s=(0,spm_1.findNativeTarget)(e,i);if(!s)throw new Error(`[smileid-spm] Native target '${i}' not found in Xcode project.`);const t=(0,spm_1.section)(e,"PBXShellScriptBuildPhase");if(s.obj.buildPhases.some(n=>{const o=t[n.value];return o!==void 0&&typeof o=="object"&&o!==null&&o.name?.replace(/^"|"$/g,"")===exports.SIGNATURE_DEDUP_PHASE_NAME}))return;const r=(0,spm_1.generateUuid)(e);t[r]={isa:"PBXShellScriptBuildPhase",name:`"${exports.SIGNATURE_DEDUP_PHASE_NAME}"`,shellPath:"/bin/sh",shellScript:JSON.stringify(exports.SIGNATURE_DEDUP_SCRIPT),alwaysOutOfDate:"1",buildActionMask:"2147483647",files:[],inputPaths:[],outputPaths:[],runOnlyForDeploymentPostprocessing:"0"},t[`${r}_comment`]=exports.SIGNATURE_DEDUP_PHASE_NAME,s.obj.buildPhases.push({value:r,comment:exports.SIGNATURE_DEDUP_PHASE_NAME})}function disableSignatureAggregation(e,i){const s=(0,spm_1.findNativeTarget)(e,i);if(!s)throw new Error(`[smileid-spm] Native target '${i}' not found in Xcode project.`);const t=s.obj.buildConfigurationList;if(!t)throw new Error(`[smileid-spm] Native target '${i}' has no build configuration list.`);const u=(0,spm_1.section)(e,"XCConfigurationList"),r=(0,spm_1.section)(e,"XCBuildConfiguration"),n=u[t];if(!n||typeof n!="object"||!n.buildConfigurations)throw new Error(`[smileid-spm] Build configuration list for '${i}' is unreadable.`);for(const o of n.buildConfigurations){const a=r[o.value];!a||typeof a!="object"||(a.buildSettings??={},a.buildSettings.ENABLE_SIGNATURE_AGGREGATION="NO")}}

package/plugin/build/lib/spm.d.ts

@@ -1,54 +0,0 @@
-import { XcodeProject } from "expo/config-plugins";
-export interface SpmPackage {
-    /** Remote git URL of the Swift Package, e.g. `https://github.com/smileidentity/ios-spm`. */
-    url: string;
-    /** Version requirement; mirrors Xcode's package resolution UI. */
-    requirement: SpmRequirement;
-}
-export type SpmRequirement = {
-    kind: "upToNextMajorVersion";
-    minimumVersion: string;
-} | {
-    kind: "upToNextMinorVersion";
-    minimumVersion: string;
-} | {
-    kind: "exactVersion";
-    version: string;
-} | {
-    kind: "branch";
-    branch: string;
-};
-export interface SpmTargetLink {
-    /** Native target name in the project (app target or pod target). */
-    targetName: string;
-    /** SPM library product names to attach to the target. */
-    products: string[];
-}
-/**
- * Adds (or reuses) a remote Swift Package reference on the given
- * Xcode project and links the requested products to the target.
- * Idempotent: existing package refs and product deps are reused so
- * multiple plugins can compose without conflict.
- */
-export declare function linkSpmPackage(project: XcodeProject, pkg: SpmPackage, link: SpmTargetLink): void;
-export interface NativeTarget {
-    uuid: string;
-    obj: PbxNativeTarget;
-}
-interface PbxNativeTarget {
-    isa: "PBXNativeTarget";
-    name: string;
-    packageProductDependencies?: Array<{
-        value: string;
-        comment?: string;
-    }>;
-    buildPhases: Array<{
-        value: string;
-        comment?: string;
-    }>;
-    buildConfigurationList?: string;
-}
-export declare function section<T>(project: XcodeProject, isa: string): Record<string, T>;
-export declare function generateUuid(project: XcodeProject): string;
-export declare function findNativeTarget(project: XcodeProject, name: string): NativeTarget | undefined;
-export {};

package/plugin/build/lib/spm.js

@@ -1 +0,0 @@
-"use strict";Object.defineProperty(exports,"__esModule",{value:!0}),exports.linkSpmPackage=linkSpmPackage,exports.section=section,exports.generateUuid=generateUuid,exports.findNativeTarget=findNativeTarget;function linkSpmPackage(e,n,o){const t=upsertPackageReference(e,n),i=findNativeTarget(e,o.targetName);if(!i)throw new Error(`[smileid-spm] Native target '${o.targetName}' not found in Xcode project.`);for(const c of o.products)upsertProductDependency(e,i.uuid,t,c)}function objects(e){return e.hash.project.objects}function section(e,n){const o=objects(e);return o[n]||(o[n]={}),o[n]}function generateUuid(e){return e.generateUuid()}function upsertPackageReference(e,n){const o=section(e,"XCRemoteSwiftPackageReference");for(const[c,r]of Object.entries(o))if(!c.endsWith("_comment")&&!(typeof r!="object"||r===null)&&r.repositoryURL?.replace(/^"|"$/g,"")===n.url)return{uuid:c};const t=generateUuid(e);o[t]={isa:"XCRemoteSwiftPackageReference",repositoryURL:`"${n.url}"`,requirement:serializeRequirement(n.requirement)},o[`${t}_comment`]=`XCRemoteSwiftPackageReference "${repoName(n.url)}"`;const i=section(e,"PBXProject");for(const[c,r]of Object.entries(i))c.endsWith("_comment")||typeof r!="object"||r===null||r.isa==="PBXProject"&&(r.packageReferences??=[],r.packageReferences.some(s=>s.value===t)||r.packageReferences.push({value:t,comment:`XCRemoteSwiftPackageReference "${repoName(n.url)}"`}));return{uuid:t}}function upsertProductDependency(e,n,o,t){const c=section(e,"PBXNativeTarget")[n];if(!c||typeof c!="object")throw new Error(`[smileid-spm] Target ${n} disappeared between lookups.`);const r=section(e,"XCSwiftPackageProductDependency");c.packageProductDependencies??=[];let s=c.packageProductDependencies.find(a=>{const u=r[a.value];return u!==void 0&&typeof u=="object"&&u!==null&&u.package===o.uuid&&u.productName===t})?.value;s||(s=generateUuid(e),r[s]={isa:"XCSwiftPackageProductDependency",package:o.uuid,productName:t},r[`${s}_comment`]=t,c.packageProductDependencies.push({value:s,comment:t})),ensureFrameworkLink(e,c,s,t)}function ensureFrameworkLink(e,n,o,t){const i=findFrameworksBuildPhase(e,n);if(!i)throw new Error(`[smileid-spm] Target '${n.name}' has no PBXFrameworksBuildPhase; cannot link ${t}.`);const c=section(e,"PBXBuildFile");i.obj.files??=[];for(const s of i.obj.files){const a=c[s.value];if(a!==void 0&&typeof a=="object"&&a!==null&&a.productRef===o)return}const r=generateUuid(e);c[r]={isa:"PBXBuildFile",productRef:o},c[`${r}_comment`]=`${t} in Frameworks`,i.obj.files.push({value:r,comment:`${t} in Frameworks`})}function findFrameworksBuildPhase(e,n){const o=section(e,"PBXFrameworksBuildPhase");for(const t of n.buildPhases){const i=o[t.value];if(i&&typeof i=="object"&&i.isa==="PBXFrameworksBuildPhase")return{uuid:t.value,obj:i}}}function findNativeTarget(e,n){const o=section(e,"PBXNativeTarget");for(const[t,i]of Object.entries(o))if(!t.endsWith("_comment")&&!(typeof i!="object"||i===null)&&i.isa==="PBXNativeTarget"&&(i.name===n||i.name===`"${n}"`))return{uuid:t,obj:i}}function serializeRequirement(e){switch(e.kind){case"upToNextMajorVersion":return{kind:"upToNextMajorVersion",minimumVersion:e.minimumVersion};case"upToNextMinorVersion":return{kind:"upToNextMinorVersion",minimumVersion:e.minimumVersion};case"exactVersion":return{kind:"exactVersion",version:e.version};case"branch":return{kind:"branch",branch:e.branch}}}function repoName(e){return e.replace(/\.git$/,"").match(/\/([^/]+)$/)?.[1]??e}